sparkis
asked on
Exchange 2007 Logs not flushing
For the past month my exchange logs are not flushing. my backups are running fine and properly backing up the full database. I assume the issue is with Exchange. I brought down an SCR target server around the same time. I did disable StorageGroupCopy before taking tat server down. I did add a new GC server replacing the old GC that held all of the FSMO roles.
So far I cannot find the issue. I do keep seeing this in the log: It appears that there is something wrong with exchange sys mailboxes. All the services start without issue after reboot. Admin password has not been changed. Any suggestions would be helpful.
Event Type: Error
Event Source: MSExchange System Attendant Mailbox
Event Category: General
Event ID: 4001
Date: 8/18/2010
Time: 8:14:05 PM
User: N/A
Computer: MAIL
Description:
A transient failure has occurred. The problem may resolve itself in awhile. The service will retry in 56 seconds. Diagnostic information:
Cannot open mailbox /o=MyCompany /ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Confi guration/c n=Servers/ cn=MAIL/cn =Microsoft System Attendant.
Microsoft.Exchange.Data.St orage.Conn ectionFail edTransien tException : Cannot open mailbox /o= MyCompany /ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Confi guration/c n=Servers/ cn=MAIL/cn =Microsoft System Attendant. ---> Microsoft.Mapi.MapiExcepti onLogonFai led: MapiExceptionLogonFailed: Unable to open message store. (hr=0x80040111, ec=-2147221231)
Diagnostic context:
Lid: 18969 EcDoRpcExt2 called [length=258]
Lid: 27161 EcDoRpcExt2 returned [ec=0x0][length=116][laten cy=0]
Lid: 23226 --- ROP Parse Start ---
Lid: 27962 ROP: ropLogon [254]
Lid: 17082 ROP Error: 0x80040111
Lid: 26937
Lid: 21921 StoreEc: 0x80040111
Lid: 27962 ROP: ropExtendedError [250]
Lid: 1494 ---- Remote Context Beg ----
Lid: 26426 ROP: ropLogon [254]
Lid: 59409
Lid: 45073
Lid: 11173 StoreEc: 0x80040111
Lid: 22970
Lid: 8620 StoreEc: 0x80040111
Lid: 1750 ---- Remote Context End ----
Lid: 26849
Lid: 21817 ROP Failure: 0x80040111
Lid: 26297
Lid: 16585 StoreEc: 0x80040111
Lid: 32441
Lid: 1706 StoreEc: 0x80040111
Lid: 24761
Lid: 20665 StoreEc: 0x80040111
Lid: 25785
Lid: 29881 StoreEc: 0x80040111
at Microsoft.Mapi.MapiExcepti onHelper.T hrowIfErro r(String message, Int32 hresult, Int32 ec, DiagnosticContext diagCtx)
at Microsoft.Mapi.ExRpcConnec tion.OpenM sgStore(Op enStoreFla g storeFlags, String mailboxDn, Guid mailboxGuid, Guid mdbGuid, MapiStore msgStorePrivate, String& correctServerDn, ClientIdentityInfo clientIdentityAs, String userDnAs, String applicationId, CultureInfo cultureInfo)
at Microsoft.Mapi.ConnectionC ache.OpenM apiStore(S tring mailboxDn, Guid mailboxGuid, Guid mdbGuid, ClientIdentityInfo clientIdentity, String userDnAs, OpenStoreFlag openStoreFlags, CultureInfo cultureInfo, String applicationId)
at Microsoft.Mapi.ConnectionC ache.OpenM ailbox(Str ing mailboxDn, Guid mailboxGuid, Guid mdbGuid, WindowsIdentity windowsIdentityAs, String userDnAs, OpenStoreFlag openStoreFlags, CultureInfo cultureInfo, String applicationId)
at Microsoft.Exchange.Data.St orage.Conn ectionCach ePool.Open Mailbox(St ring serverDn, String userDn, String mailboxDn, Guid mailboxGuid, Guid mdbGuid, Object identity, ConnectFlag connectFlag, OpenStoreFlag openStoreFlag, CultureInfo cultureInfo, String clientInfoString, Boolean secondTry)
--- End of inner exception stack trace ---
at Microsoft.Exchange.Data.St orage.Conn ectionCach ePool.Open Mailbox(St ring serverDn, String userDn, String mailboxDn, Guid mailboxGuid, Guid mdbGuid, Object identity, ConnectFlag connectFlag, OpenStoreFlag openStoreFlag, CultureInfo cultureInfo, String clientInfoString, Boolean secondTry)
at Microsoft.Exchange.Data.St orage.Conn ectionCach ePool.Open Mailbox(St ring serverDn, String userDn, String mailboxDn, Guid mailboxGuid, Guid mdbGuid, Object identity, ConnectFlag connectFlag, OpenStoreFlag openStoreFlag, CultureInfo cultureInfo, String clientInfoString, Boolean secondTry)
at Microsoft.Exchange.Data.St orage.Conn ectionCach ePool.Open Mailbox(St ring serverDn, String userDn, String mailboxDn, Guid mailboxGuid, Guid mdbGuid, Object identity, ConnectFlag connectFlag, OpenStoreFlag openStoreFlag, CultureInfo cultureInfo, String clientInfoString)
at Microsoft.Exchange.Data.St orage.Mail boxSession .Initializ e(LogonTyp e logonType, ExchangePrincipal owner, DelegateLogonUser delegateUser, Object identity, OpenMailboxSessionFlags flags)
at Microsoft.Exchange.Data.St orage.Mail boxSession .CreateMai lboxSessio n(LogonTyp e logonType, ExchangePrincipal owner, DelegateLogonUser delegateUser, Object identity, OpenMailboxSessionFlags flags, CultureInfo cultureInfo, String clientInfoString)
at Microsoft.Exchange.Data.St orage.Mail boxSession .OpenAsAdm in(Exchang ePrincipal mailboxOwner, CultureInfo cultureInfo, String clientInfoString, Boolean useLocalRpc, Boolean ignoreHomeMdb)
at Microsoft.Exchange.Data.St orage.Mail boxSession .OpenAsAdm in(Exchang ePrincipal mailboxOwner, CultureInfo cultureInfo, String clientInfoString)
at Microsoft.Exchange.Service lets.Syste mAttendant Mailbox.Se rvicelet.W ork()
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
So far I cannot find the issue. I do keep seeing this in the log: It appears that there is something wrong with exchange sys mailboxes. All the services start without issue after reboot. Admin password has not been changed. Any suggestions would be helpful.
Event Type: Error
Event Source: MSExchange System Attendant Mailbox
Event Category: General
Event ID: 4001
Date: 8/18/2010
Time: 8:14:05 PM
User: N/A
Computer: MAIL
Description:
A transient failure has occurred. The problem may resolve itself in awhile. The service will retry in 56 seconds. Diagnostic information:
Cannot open mailbox /o=MyCompany /ou=Exchange Administrative Group (FYDIBOHF23SPDLT)/cn=Confi
Microsoft.Exchange.Data.St
Diagnostic context:
Lid: 18969 EcDoRpcExt2 called [length=258]
Lid: 27161 EcDoRpcExt2 returned [ec=0x0][length=116][laten
Lid: 23226 --- ROP Parse Start ---
Lid: 27962 ROP: ropLogon [254]
Lid: 17082 ROP Error: 0x80040111
Lid: 26937
Lid: 21921 StoreEc: 0x80040111
Lid: 27962 ROP: ropExtendedError [250]
Lid: 1494 ---- Remote Context Beg ----
Lid: 26426 ROP: ropLogon [254]
Lid: 59409
Lid: 45073
Lid: 11173 StoreEc: 0x80040111
Lid: 22970
Lid: 8620 StoreEc: 0x80040111
Lid: 1750 ---- Remote Context End ----
Lid: 26849
Lid: 21817 ROP Failure: 0x80040111
Lid: 26297
Lid: 16585 StoreEc: 0x80040111
Lid: 32441
Lid: 1706 StoreEc: 0x80040111
Lid: 24761
Lid: 20665 StoreEc: 0x80040111
Lid: 25785
Lid: 29881 StoreEc: 0x80040111
at Microsoft.Mapi.MapiExcepti
at Microsoft.Mapi.ExRpcConnec
at Microsoft.Mapi.ConnectionC
at Microsoft.Mapi.ConnectionC
at Microsoft.Exchange.Data.St
--- End of inner exception stack trace ---
at Microsoft.Exchange.Data.St
at Microsoft.Exchange.Data.St
at Microsoft.Exchange.Data.St
at Microsoft.Exchange.Data.St
at Microsoft.Exchange.Data.St
at Microsoft.Exchange.Data.St
at Microsoft.Exchange.Data.St
at Microsoft.Exchange.Service
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
ASKER
[PS] C:\Documents and Settings\Administrator.MYD OMAIN>Test -Replicati onHealth
WARNING: The local server does not have local continuous replication enabled for any storage groups. No diagnostic checks will be performed.
WARNING: The local server does not have local continuous replication enabled for any storage groups. No diagnostic checks will be performed.
Try
Get-StorageGroupCopyStatus
Get-StorageGroupCopyStatus
ASKER
It has been disabled for over a month
[PS] C:\Documents and Settings\Administrator.MYD OMAIN>Get- StorageGro upCopyStat us
Name SummaryCopyStatus CopyQueueLength ReplayQueueLength LastInspectedLogTime
---- ----------------- --------------- ----------------- --------------------
Second Storage Group Disabled 0 0
First Storage Group Disabled 0 0
[PS] C:\Documents and Settings\Administrator.MYD
Name SummaryCopyStatus CopyQueueLength ReplayQueueLength LastInspectedLogTime
---- ----------------- --------------- ----------------- --------------------
Second Storage Group Disabled 0 0
First Storage Group Disabled 0 0
How many databases in each of those storage groups? Do you have any RSGs? I have seen RSGs stop transaction logs from being truncated in the past. Remove RSGs after you have finished with them.
Have you thought about moving all mailboxes out of the database that contains the system attendant mailbox to a new database and then deleting the old database so a new system attendant mailbox gets created by Exchange?
Have you thought about moving all mailboxes out of the database that contains the system attendant mailbox to a new database and then deleting the old database so a new system attendant mailbox gets created by Exchange?
ASKER
I only have one database for each storage group (~60GB). I did have a RSG and removed that earlier this week in an effort to get these logs flushed.
When you do the backup are you seeing any events logs which mention that the logs were failed to be truncated?
ASKER
All I see from ESE is ShadowCopy EventID 225
MSExchangeIS (2308) First Storage Group: No log files can be truncated.
there is nothing else in that Event, and there are no other events pertaining to it.
MSExchangeIS (2308) First Storage Group: No log files can be truncated.
there is nothing else in that Event, and there are no other events pertaining to it.
Looks like you might have to move all the mailboxes to new databases...
Have a look at the last post in this article:
http://forums.msexchange.org/m_1800412780/printable.htm
Have a look at the last post in this article:
http://forums.msexchange.org/m_1800412780/printable.htm
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Thanks for the solution. Did yo have to delete it using ADSIEdit?
ASKER
I did.
I'll make a note of that one...
Can you run Test-ReplicationHealth and post the output? This will confirm if the SCR was disabled correctly. This commonly causes the logs not to flush.